Server wont starts, says service name invalid

[dalec]

What a great way to start a Monday...

I have an NT 4.0 server running exchange 5.5, and this morning it was at the login prompt. after login I got an error that a service could not be loaded. After some exploration I noticed that "Server" in control panel won't start, everytime I try to start it I get the error the the service name cannot be found. Once it boots up all the way I see a new tray icon "Dameware". So I think I've been hacked, I really need to get this online as fast as I can, has anyone else had this problem, seem like dns and exchange, plus other services depend on that starting and/or rpcss which if I try to start it at the command line says.. "Service does not exist". thanks ahead of time for any help, I really need some ideas on what to do. Where can I check the service name or anything else to get this up?

 

[dalec]

Thought I'd explain what I found out, incase it helps someone else. What had happened is someone did hack the system. They obtained administrative access and deleted registry keys so the server, lanman, rcpss, would not run.

I'm still having a problem with getting user administration to come up, tells me the domain could not be contacted, so, I still have to find what key controls that.

Do yourself a favor, rename your administrator account and use strong passwords if you have to have port numbers open.